Conversation with yohoho@jabber.ccc.de at 12/14/2011 3:36:31 AM on 
LeonDavidson@jabber.org/jabber.org (jabber) 


(3:36:31 AM) yohoho@jabber.ccc.de: yo 

(3:36:40 AM) Unverified conversation with yohoho@jabber.ccc.de/ghost started. 

(4:25:29 AM) yohoho@jabber.ccc.de: !!! 

(4:28:10 AM) yohoho@jabber.ccc.de: !!! 

(6:03:53 AM) yohoho@jabber.ccc.de: . 

(6:26:49 AM) yohoho@jabber.ccc.de: hey 
(9:12:52 AM) yohoho@jabber.ccc.de: we good 
(9:12:56 AM) yohoho@jabber.ccc.de: real good 
(4:39:26 PM) leondavidson@jabber.org/jabber.org: o 

(4:25:13 AM) The following message received from yohoho@jabber.ccc.de was not encrypted: 
[yoyo] 

(4:41:01 AM) Ieondavidson@jabber.org/0bfl089310cda5ca: yoo fam 

(4:41:03 AM) OTR Error: You sent encrypted data to yohoho@jabber.ccc.de, who wasn't 

expecting it. 

(4:41:07 AM) Successfully refreshed the unverified conversation with 
yohoho @ jabber.ccc.de/ghost. 

(4:41:07 AM) The last message to yohoho@jabber.ccc.de was resent. 

(4:41:18 AM) yohoho@jabber.ccc.de: hey what's good 

(4:42:38 AM) Ieondavidson@jabber.org/0bfl089310cda5ca: chillin brother 

(4:42:50 AM) Ieondavidson@jabber.org/0bfl089310cda5ca: saw your ass online said to myself 

let me hit my bro up 

(4:42:55 AM) Ieondavidson@jabber.org/0bfl089310cda5ca: im also drunk 
(4:42:58 AM) Ieondavidson@jabber.org/0bfl089310cda5ca: so double+4- 
(4:43:08 AM) yohoho@jabber.ccc.de: hell yes 
(4:43:10 AM) yohoho@jabber.ccc.de: well 

(4:43:23 AM) yohoho@jabber.ccc.de: long story short I rooted that mofo and stole their mail 
spools 

(4:43:26 AM) yohoho@jabber.ccc.de: so we're good 

(4:43:32 AM) Ieondavidson@jabber.org/0bfl089310cda5ca: yeah alex told me this mornin 
(4:43:38 AM) Ieondavidson@jabber.org/0bfl089310cda5ca: he said he grabbed clear someshit 
(4:43:43 AM) Ieondavidson@jabber.org/0bfl089310cda5ca: congrats brother 
(4:43:43 AM) yohoho@jabber.ccc.de: great 

(4:43:51 AM) Ieondavidson@jabber.org/0bfl089310cda5ca: I don't ever think I said I was proud 
of you 

(4:43:54 AM) Ieondavidson@jabber.org/0bfl089310cda5ca: but I am 

(4:43:57 AM) Ieondavidson@jabber.org/0bfl089310cda5ca: I think I love you 

(4:43:57 AM) yohoho@jabber.ccc.de: hah you drunk 

(4:43:59 AM) Ieondavidson@jabber.org/0bfl089310cda5ca: nohomo 

(4:44:03 AM) Ieondavidson@jabber.org/0bfl089310cda5ca: lololol 

(4:44:04 AM) yohoho@jabber.ccc.de: drunk fool hah 

(4:44:07 AM) yohoho@jabber.ccc.de: hey have you seen antisec.us 

(4:44:12 AM) Ieondavidson@jabber.org/0bfl089310cda5ca: nein 

(4:44:14 AM) Ieondavidson@jabber.org/0bfl089310cda5ca: wf is that 
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(4:44:15 AM) yohoho@jabber.ccc.de: you should check it out 

(4:44:21 AM) yohoho@jabber.ccc.de: some message someone put out 

(4:44:27 AM) yohoho@jabber.ccc.de: they dn't like us 

(4:46:54 AM) Ieondavidson@jabber.org/0bfl089310cda5ca: guess what 

(4:47:03 AM) Ieondavidson@jabber.org/0bfl089310cda5ca: ok so my drunken ass has figured 

this out 

(4:47:11 AM) Ieondavidson@jabber.org/0bfl089310cda5ca: im drunk, apparently I type better 
when I'm drunk 

(4:47:13 AM) Ieondavidson@jabber.org/0bfl089310cda5ca: by brother 
(4:47:15 AM) Ieondavidson@jabber.org/0bfl089310cda5ca: but 

(4:47:33 AM) Ieondavidson@jabber.org/0bfl089310cda5ca: notice the headers to that message 
was/is close to dikline.org 

(4:47:33 AM) Ieondavidson@jabber.org/0bfl089310cda5ca: but 

(4:47:37 AM) Ieondavidson@jabber.org/0bfl089310cda5ca: I don't think its them 

(4:47:43 AM) yohoho@jabber.ccc.de: yeah I did notice that actually 

(4:47:47 AM) yohoho@jabber.ccc.de: isn’t it cloudfare? 

(4:47:50 AM) Ieondavidson@jabber.org/0bfl089310cda5ca: whois'd domain found a seemingly 
temp email address, but 

(4:48:08 AM) Ieondavidson@jabber.org/0bfl089310cda5ca: that email was used by: 
http://s 1132.photobucket.com/profile/xDeadxRealityx 

(4:48:12 AM) Ieondavidson@jabber.org/0bfl089310cda5ca: homeboy doxed himself 
(4:48:31 AM) Ieondavidson@jabber.org/0bfl089310cda5ca: 

http://s 1132.photobucket.com/profile/xDeadxRealityx/followers 

(4:48:39 AM) Ieondavidson@jabber.org/0bfl089310cda5ca: going to find who this nigga is 
(4:48:43 AM) Ieondavidson@jabber.org/0bfl089310cda5ca: reading his message though 
(4:48:44 AM) Ieondavidson@jabber.org/0bfl089310cda5ca: sec 
(4:49:24 AM) yohoho@jabber.ccc.de: also 

(4:49:30 AM) yohoho@jabber.ccc.de: did you see movl dropped the specialforces password list 
(4:49:35 AM) yohoho@jabber.ccc.de: that's 14k user/passes plaintext 
(4:49:57 AM) Ieondavidson@jabber.org/0bfl089310cda5ca: yup. in our zine include the 
hacklog and all your research as proof that was yours 

(4:49:58 AM) yohoho@jabber.ccc.de: shit we worked on together and he posted it saying that 
was the source of all our hacks that "he" got for us 

(4:50:00 AM) Ieondavidson@jabber.org/0bfl089310cda5ca: or ours whatever 
(4:50:03 AM) Ieondavidson@jabber.org/0bfl089310cda5ca: yup 
(4:50:04 AM) yohoho@jabber.ccc.de: exactly 

(4:50:15 AM) yohoho@jabber.ccc.de: already started writing that story actually 

(4:50:16 AM) Ieondavidson@jabber.org/0bfl089310cda5ca: hes trying to get himself a little 

attention 

(4:50:24 AM) Ieondavidson@jabber.org/0bfl089310cda5ca: but guess what my nigga 

(4:50:26 AM) Ieondavidson@jabber.org/0bfl089310cda5ca: they cant stop us 

(4:50:28 AM) Ieondavidson@jabber.org/0bfl089310cda5ca: you hear me 

(4:50:43 AM) Ieondavidson@jabber.org/0bfl089310cda5ca: what we are going to do 

(4:50:56 AM) Ieondavidson@jabber.org/0bfl089310cda5ca: start hitting whitehats hard show 

these niggas we are real 

(4:51:11 AM) yohoho@jabber.ccc.de: yes 
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(4:5l:46AM) Ieondavidson@jabber.org/0bfl089310cda5ca: ;) 

(4:52:08 AM) yohoho@jabber.ccc.de: i'm working real hard to make this txt the best we've ever 
put out 

(4:53:13 AM) leondavidson @jabber.org/0bfl089310cda5ca: <3 

(4:53:16 AM) Ieondavidson@jabber.org/0bfl089310cda5ca: thx bro 

(4:53:32 AM) Ieondavidson@jabber.org/0bfl089310cda5ca: between you and me I've been 

working a lot with the internals of wikileaks 

(4:53:55 AM) leondavidson @jabber.org/0bfl089310cda5ca: before lulzsec broke apart they 
came to us to hack the entire government of iceland 

(4:54:03 AM) leondavidson @jabber.org/0bfl089310cda5ca: so me and kayla worked that 

(4:54:09 AM) leondavidson @jabber.org/0bfl089310cda5ca: until she bounced so 

(4:59:40 AM) Ieondavidson@jabber.org/0bfl089310cda5ca: hahahaah 

(4:59:43 AM) Ieondavidson@jabber.org/0bfl089310cda5ca: ok back to reality 

(4:59:45 AM) Ieondavidson@jabber.org/0bfl089310cda5ca: yo my nigga 

(4:59:49 AM) leondavidson @jabber.org/0bfl089310cda5ca: anything good in those mails? 

(5:01:22 AM) yohoho@jabber.ccc.de: well 

(5:01:26 AM) yohoho@jabber.ccc.de: I was reading the sysadmins 
(5:01:30 AM) yohoho@jabber.ccc.de: senior programmer 

(5:01:38 AM) yohoho@jabber.ccc.de: they ame't aware of a breach, unlike what we previously 
thought 

(5:01:50 AM) yohoho@jabber.ccc.de: they believe one server had cache related slowness issues 
(5:03:04 AM) yohoho@jabber.ccc.de: however it looks like I have more work to do to get these 
spools 

(5:03:18 AM) yohoho@jabber.ccc.de: zimbras format is not like standard qmail or mbox 

(5:07:25 AM) leondavidson @jabber.org/0bfl089310cda5ca: perfect 

(5:07:47 AM) yohoho@jabber.ccc.de: well actually it's much more difficult 

(5:07:58 AM) yohoho@jabber.ccc.de: and I don't have the complete set of files either 

(5:08:03 AM) yohoho@jabber.ccc.de: looks like I have ot put in a few more horus 

(5:23:36 AM) leondavidson @jabber.org/0bfl089310cda5ca: (4:31:25 AM) 

benali@jabber.ccc.de: ohai leon. working with rollin on some box, do you see him somewhere? 

plOx send him subhuman@jabber.ccc.de 

(4:31:54 AM) leondavidson@jabber.org/Obf1089310cda5ca: ? 

(4:32:49 AM) benali@jabber.ccc.de: he’s setting up httpd with new batch to release 
(4:33:49 AM) leondavidson@jabber.org/Obf1089310cda5ca: who is this? 

(4:33:56 AM) benali@jabber.ccc.de: that's also my newer jab btw 
(4:33:58 AM) benali@jabber.ccc.de: bOtmOn 

(4:34:56 AM) benali@jabber.ccc.de: shellbox vpn went offline, so disconnected from cryto :/ 
(4:35:25 AM) Ieondavidson@jabber.org/0bfl089310cda5ca: :/ 

(4:35:39 AM) benali@jabber.ccc.de: clearer now? xD 
(4:35:42 AM) leondavidson@jabber.org/Obf1089310cda5ca: yup 

(4:35:49 AM) leondavidson@jabber.org/Obf1089310cda5ca: what happened with shellbox? 
(4:36:37 AM) benali@jabber.ccc.de: VPN reconnected, we have tor report to an onion httpd logs 
when it does, but tor was down, tor cron'd to restart daily, any time now... 

(4:36:55 AM) Ieondavidson@jabber.org/0bfl089310cda5ca: got you 

(4:37:05 AM) Ieondavidson@jabber.org/0bfl089310cda5ca: we need a better server that box got 
issues 
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(4:37:16 AM) benali@jabber.ccc.de: its way slow 
(4:37:29 AM) benali@jabber.ccc.de: i restored the latvia box 

(4:38:14 AM) benali@jabber.ccc.de: didnt adduser you yet, though, but silcd and all are back on 
same address 

(4:38:53 AM) benali@jabber.ccc.de: usually i dont care about icy VPN ip, using .onion instead 
(4:39:10 AM) leondavidson@jabber.org/0bf1089310cda5ca: indeed 
(4:39:37 AM) benali@jabber.ccc.de: the vpn has dynamic ip so cycles from time to time 
(4:40:48 AM) benali@jabber.ccc.de: so plOx query g_sup (?) with my new jab so we can work 

xD 

(5:23:08 AM) benali@jabber.ccc.de: there? 

(5:23:24 AM) Ieondavidson@jabber.org/0bfl089310cda5ca: yo 

(5:23:57 AM) Ieondavidson@jabber.org/0bfl089310cda5ca: you trust that? im drunk 

(5:26:34 AM) Ieondavidson@jabber.org/0bfl089310cda5ca: (5:25:29 AM) 

Ieondavidson@jabber.org/0bfl089310cda5ca: I have trust issues when I'm drunk 

(5:25:29 AM) benali@jabber.ccc.de: think he's on cryto as g_sup or so 

(5:25:35 AM) benali@jabber.ccc.de: lolk 

(5:25:37 AM) Ieondavidson@jabber.org/0bfl089310cda5ca: let my brain coordinate 
this entire process 

(5:25:39 AM) Ieondavidson@jabber.org/0bfl089310cda5ca: sec 
(5:25:43 AM) benali@jabber.ccc.de: <3 

(5:26:10 AM) benali@jabber.ccc.de: sending my subhuman@iabber.ccc.de to him 
isnt big of risk xD 

(5:27:08 AM) yohoho@jabber.ccc.de: hrm I know bOtmOn runs the servers right? 

(5:27:21 AM) yohoho@jabber.ccc.de: but I don't know who subhuman is 
(5:27:54 AM) Ieondavidson@jabber.org/0bfl089310cda5ca: its apparently "him" 

(5:28:02 AM) Ieondavidson@jabber.org/0bfl089310cda5ca: I dont knw this kid like that 
(5:28:02 AM) Ieondavidson@jabber.org/0bfl089310cda5ca: so 
(5:28:27 AM) yohoho@jabber.ccc.de: hrm ill see whats up 
(5:28:35 AM) Ieondavidson@jabber.org/0bfl089310cda5ca: kk 

(5:28:58 AM) Ieondavidson@jabber.org/0bfl089310cda5ca: ask him shit only he would know. I 
dont like fishy shit like that 

(5:29:04 AM) Ieondavidson@jabber.org/0bfl089310cda5ca: my paranoia meter is up like whoa 
(5:29:13 AM) yohoho@jabber.ccc.de: hah you drunk 

(5:29:13 AM) Ieondavidson@jabber.org/0bfl089310cda5ca: bro I want to fucking own so many 
people right now 

(5:29:18 AM) Ieondavidson@jabber.org/0bfl089310cda5ca: take it back to my old days son 
(5:29:27 AM) Ieondavidson@jabber.org/0bfl089310cda5ca: I've been so humble and chill 
(5:29:31 AM) Ieondavidson@jabber.org/0bfl089310cda5ca: but I wanna ravage niggas 
(5:29:49 AM) Ieondavidson@jabber.org/0bfl089310cda5ca: drop entire networks root 
everything and everyone even assosciated to them 

(5:29:57 AM) Ieondavidson@jabber.org/0bfl089310cda5ca: my nigga I wanna fucking 

(5:30:01 AM) Ieondavidson@jabber.org/0bfl089310cda5ca: rm and spool the planet right now 

(5:35:37 AM) yohoho@jabber.ccc.de: yeah it's bOtmOn 

(5:39:14 AM) Ieondavidson@jabber.org/0bfl089310cda5ca: kk 

(5:40:01 AM) yohoho@jabber.ccc.de: ok this is kind of a problem 
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(5:40:06 AM) yohoho@jabber.ccc.de: shit is a lot bigger than I thought it was 

(5:40:27 AM) yohoho@jabber.ccc.de: what I dumped last night was just message headers and 

other small irrelevant stats 

(5:40:44 AM) yohoho@jabber.ccc.de: but now I'm trying to dump the actual messages and it's 
going to end up being huge 

(5:40:54 AM) yohoho@jabber.ccc.de: and extremely difficult to copy 

(5:41:33 AM) yohoho@jabber.ccc.de: I just started tar.gz'n 4 spools and it's been 25 minutes and 
they are still not done 

(5:41:40 AM) yohoho@jabber.ccc.de: one's at 900MB, oothers -500MB 

(5:42:17 AM) yohoho@jabber.ccc.de: also the format will be difficult to render with mhonarc 

(5:42:19 AM) Ieondavidson@jabber.org/0bfl089310cda5ca: nfs mount the directory from target 

to your hack server with lots of space, from hacked box rsync that bitch in a screen 

(5:42:21 AM) Ieondavidson@jabber.org/0bfl089310cda5ca: and go to sleep 

(5:42:45 AM) yohoho@jabber.ccc.de: well I'm gonna tar.gz it first 

(5:42:48 AM) yohoho@jabber.ccc.de: it will make bigass diff 

(5:43:07 AM) Ieondavidson@jabber.org/0bfl089310cda5ca: tar'ing it will cause a big resource 
hog 

(5:43:09 AM) Ieondavidson@jabber.org/0bfl089310cda5ca: they'll notice it 

(5:43:28 AM) Ieondavidson@jabber.org/0bfl089310cda5ca: much faster than just rsyncing it 

over nfs and they have to have mrtg/cactus graphs to alert them 

(8:52:15 PM) yohoho@jabber.ccc.de: yoyo 
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